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17/3, K/l (Item 1 from file: 16) 

DIALOG (R) File 16: Gale Group PROMT (R) 

(c) 2004 The Gale Group. All rts . reserv. 

06120131 Supplier Number: 53735690 (USE FORMAT 7 FOR FULLTEXT) 
Stamping Out Crime. (US Postal Service selling stamps over 
Internet) (Government Activity) 

Bruno, Lee 

Data Communications, pl6(l) 
Feb 7, 1999 

Language: English Record Type: Fulltext 
Document Type: Magazine/ Journal; Trade 
Word Count: 194 



(USE FORMAT 7 FOR FULLTEXT) 
TEXT: 

...Postal Service (Washington, D.C.) to the tune of $100 million a year. 
But PKI ( public key infrastructure) technology could help staunch the 
flow of illicit dollars-and let customers buy postage... 

...Postal Service lets owners of special digital meters download postage 
over the Internet. Its PKI server issues each meter a digital 
certificate that authenticates the device, and end-users can then print 
the postage on envelopes in. . . 

. . .postage directly to desktop PCs, allowing users to run out the bar codes 
via networked printers . The PKI for the U.S. Postal Service is scalable 
enough to generate and manage... 



17/3 ,K/2 (Item 1 from file: 275) 

DIALOG (R) File 275: Gale Group Computer DB(TM) 
(c) 2004 The Gale Group. All rts. reserv. 

02022337 SUPPLIER NUMBER: 18962650 (USE FORMAT 7 OR 9 FOR FULL TEXT) 

Database confidential. (News Briefs) (Column) 
Hunter, Buzz 

Data Based Advisor, vl5, nl, p90(l) 
Jan, 1997 

DOCUMENT TYPE: Column ISSN: 0740-5200 LANGUAGE: English 

RECORD TYPE: Fulltext 

WORD COUNT: 8 90 LINE COUNT: 00071 

scanned by a Dot Receptor that can be fitted to most personal 
computers through the printer port. The chip inside the casing 
authenticates the user to a server computer using a combination of the 
information in the iButton and a PIN. One model of the iButton randomly 
generates a public and private key set . The really big plans for the 
iButton involve making it into a secure micro. . . 
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* 18/3, K/l (Item 1 frW file: 15) 

DIALOG (R) File 15 : ABI/ Inform { R) 

(c) 2004 ProQuest Inf o&Learning . All rts. reserv. 



01497484 01-48472 

A patent expires, paving the road to secure e-commerce 

Omura, Jim 

Network World vl4n36 PP: 40 Sep 8, 1997 
ISSN: 0887-7661 JRNL CODE: NWW 
WORD COUNT: 631 

...TEXT: Hewlett-Packard 1 s Web page and sign a digital check to buy a 
printer. Her certificate will allow the HP Web server to verify her 
signature f s authenticity, but it won't be able to tell if her electronic 



. . . with her banking privileges, including limits on any digital checks she 
may sign with her public - key digital signature. Attaching her bank's 
privilege certificate along with her Japanese MPT identification 
certificate would enable the HP server to authenticate her digitally 
signed check and verify that it is backed by the Bank of Tokyo... 



18/3, K/6 (Item 1 from file: 647) 

DIALOG (R) File 647: CMP Computer Fulltext 
(c) 2004 CMP Media, LLC. All rts. reserv. 

01184166 CMP ACCESSION NUMBER: DAC19990207S0012 
Stamping Out Crime 

Lee Bruno (San Mateo, Calif.). 

DATA COMMUNICATIONS, 1999, n 2802, PG16 

PUBLICATION DATE: 990207 

JOURNAL CODE: DAC LANGUAGE: English 

RECORD TYPE: Fulltext 
SECTION HEADING: Newsfront 
WORD COUNT: 191 

TEXT : 

... Postal Service (Washington, D.C.) to the tune of $100 million a 

year. But PKI ( public key infrastructure) technology could help 
staunch the flow of illicit dollars-and let customers buy postage... 

...Postal Service lets owners of special digital meters download postage 
over the Internet. Its PKI server issues each meter a digital 
certificate that authenticates the device, and end-users can then print 
the postage on envelopes in... 

. . .postage directly to desktop PCs, allowing users to run out the bar 
codes via networked printers . The PKI for the U.S. Postal Service is 
scalable enough to generate and manage... 
?tl8/3, k/10 

18/3, K/10 (Item 4 from file: 674) 

DIALOG (R) File 67 4: Computer News Fulltext 

(c) 2004 IDG Communications. All rts. reserv. 

074732 

NOS showdown: NT vs. LINUX 

While Microsoft has the edge over Linux as a server operating system for 
the enterprise, don't count the little guy out. 

Byline: Tom Henderson 

Journal: Network World Page Number: 53 

Publication Date: May 17, 1999 

Word Count: 2335 Line Count: 221 

Text : 

. . . basic network operating system {NOS ) function - printing - we used a 
Lexmark Optra 1865 color laser printer , set up as a TCP/IP print server 



over Fast Ethernet 



a 




a Hewlett-Packard LaserJet 



• 



as a locally 



connected parallel printer .NT Server offers print services for locally 
attached printers , and spooling or queuing a job is easily controlled 
from any Windows desktop. NT Server supports printer shares for locally 
attached printers and network printers that have their own built-in 
print server controllers . Linux allows users to share networked printers 

in one of two ways. Printers can be hooked up to the Linux net as either 
a Server Message Block (SMB) shared device, represented to users as a 
Windows Printer Share, or (using a Lexmark printer driver) as a 
Unix-style lpr device. In either case, the Linux server spools print... over 
user authentication. It is possible to connect Linux servers using 
Lightweight Directory Access Protocol servers to construct off- server 

authentication authorities. Or you can configure Samba, an open-source 
application that provides file and print... 

... ROM filing systems. NT has another security advantage in that the Option 
Pack includes a certificate server , also known as a certificate 

authority (CA) . CAs can be used by e-mail applications for authentication 
using public - key infrastructure . In the future, many vendors are 
planning to use CAs for user logon authentication, as well as encryption 
and decryption . OpenLinux lacks a certificate server . Internet and LAN 
accessBoth server operating systems support Web, Network News Transfer 
Protocol and FTP services for giving end users... 
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Toppan Printing, Others Develop Non-Contact PKI System 

Japan: Toppan created new verification system 
Nikkei Net Interactive (ATM) 27 Nov 2002 NikkeiBusiness Daily Online 
Language: ENGLISH 

In Japan, Toppan Printing Co (Toppan) together with Soliton Systems KK and 
Verisign Japan KK, a provider of digital authentication service, have 
jointly invented an electronic PKI ( public key infrastructure) 

verification system, which is believed to be the first in the world. The 
system uses the FeliCa non-contact Smart IC card recommended by Sony Corp. 
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Network printer registration protocol authenticates printer by 
comparing secret identifiers of printer and server, which are 
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Abstract (Basic) : WO 200072499 Al 

NOVELTY - A secret unique identifier is stored in the printer and 
in database of registration server before the printer is connected to 
the network. When printer is connected to the network, the printer is 
authenticated by comparing the secret unique identifiers of printer 
and server, which are transmitted between printer and server over the 
network. 

DETAILED DESCRIPTION - The secret unique identifier is stored in 
printer and server with public unique identifier. The secret unique 
identifier along with public unique identifier and public key of 
printer are transmitted to the registration server to authenticate 
printer connected to the network. An INDEPENDENT CLAIM is also included 
for network registration signal. 

USE - For registering a printer such as high speed color printer on 
network. 

ADVANTAGE - Periodicals from subscriber or authorized sources is 
only delivered unlike the fax or e-mail circuit. As signature recorded 
on netpage are automatically verified, e-commerce transactions are 
authorized reliably. 

DESCRIPTION OF DRAWING (S) - The figure shows the schematic view of 
printer registration protocol, 
pp; 92 DwgNo 50/55 
Title Terms: NETWORK; PRINT; REGISTER; PROTOCOL; PRINT; COMPARE; SECRET; 

IDENTIFY; PRINT; SERVE; TRANSMIT; PRINT; SERVE; NETWORK 
Derwent Class: P75; T01; T04; W01 
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IMAGE SENSING APPARATUS INCLUDING A MICROCONTROLLER 
APPAREIL DE DETECTION D 1 IMAGE COMPRENANT UN MICROCONTROLEUR 

Patent Applicant /Assignee : 

SILVERBROOK RESEARCH PTY LTD, 393 Darling Street, Balmain, New South 
Wales 2041, AU, AU (Residence), AU (Nationality), (For all designated 
states except: US) 
Patent Applicant /Inventor : 

SILVERBROOK Kia , Silverbrook Research Pty Ltd, 393 Darling Street, 
Balmain, New South Wales 2041, AU, AU (Residence), AU (Nationality), 
(Designated only for: US 
Legal Representative: 

SILVERBROOK Kia (agent), Silverbrook Research Pty Ltd, 393 Darling 
Street, Balmain, New South Wales 2041, AU, 
Patent and Priority Information (Country, Number, Date) : 

Patent: WO 200315395 Al 20030220 (WO 0315395) 
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(EA) AM AZ BY KG KZ MD RU TJ TM 
Main International Patent Class: H04N-001/00 
International Patent Class: G06T-001/00; G06F-015/78 
Publication Language: English 
Filing Language: English 
Fulltext Availability: 

Detailed Description 

Claims 

Fulltext Word Count: 142364 
English Abstract 

An image sensing and processing apparatus includes an image sensor that 
is capable of generating signals carrying data relating to an image 
sensed by the image sensor. The apparatus includes a microcontroller. The 
microcontroller includes a wafer substrate. VLIW processor circuitry is 
positioned on the wafer substrate. Image sensor interface circuitry is 
positioned on the wafer substrate and is connected between the VLIW 
processor circuitry and the image sensor. The image sensor interface 
circuitry is configured to facilitate communication between the VLIW 
processor circuitry and the image sensor. Bus interface circuitry that is 
discrete from the image sensor interface circuitry is connected to the 
VLIW processor circuitry so that the VLIW processor circuitry can 
communicate with devices other than the image sensor via a bus. 

French Abstract 

L' invention concerne un appareil de detection et de traitement d 1 image 
comprenant un capteur d' image capable de generer des signaux port ant des 
donnees relatives a une image detectee par ledit capteur d 1 image, et un 
microcontroleur dote d'un substrat de tranche. Un circuit de processeur 
VLIW est positionne sur ledit substrat de tranche. Un circuit d 1 interface 
de capteur d 1 image est egalement positionne sur le substrat de tranche et 
est connecte entre le circuit de processeur VLIW et le capteur d f image. 




Ledit circuit d 1 interface de capteur d 1 image est configure de facon a 
faciliter la communication entre le circuit de processeur VLIW et le 
capteur d' image. Un circuit d ! interface de bus distant du circuit 
d ! interface de capteur d* image est connecte au circuit de processeur VLIW 
de sorte que ce circuit peut communiquer avec d'autres dispositifs que le 
capteur d 1 image via le bus. 

Legal Status (Type, Date, Text) 

Publication 20030220 Al With international search report. 

Examination 20030320 Request for preliminary examination prior to end of 

19th month from priority date 
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A PRINTING CARTRIDGE WITH CAPACITIVE SENSOR IDENTIFICATION 

CARTOUCHE D 1 IMPRESSION COMPORTANT UNE FONCTION D 1 IDENTIFICATION DES 
CAPTEURS CAPACITIFS 

Patent Applicant/Assignee: 
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states except: US) 
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Legal Representative: 

SILVERBROOK Kia (agent), Silverbrook Research Pty Ltd, 393 Darling 
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Main International Patent Class: B41J-002/175 
Publication Language: English 
Filing Language: English 
Fulltext Availability: 
Detailed Description 
Claims 

Fulltext Word Count: 143013 
English Abstract 

A printing cartridge (1230) includes a housing (1231) . An actuating 
formation (1240) is positioned on the housing and is capable of actuating 
a number of capacitive sensors (1238) in an array of such sensors. The 
actuating formation is configured to represent data relating to at least 
one of: a serial number of the cartridge, a media and a media colorant, 
so that the capacitive sensors, when actuated, together generate a signal 
carrying such data 



French Abstract 

L 1 invention concerne une cartouche d 1 impression (1230) qui comprend une 
enveloppe (1231) . Un dispositif d ' actionnement (1240) dispose sur 
l f enveloppe permet d'actionner un certain nombre de capteurs capacitifs 
(1238) disposes en reseau. Ce dispositif d' actionnement est concu pour 
representer des donnees se rapportant a au moins l'un des elements 
suivants : un numero de serie de la cartouche, un support et un colorant 
de support, de sorte que lorsqu'ils sont actionnes, les capteurs 
capacitifs produisent un signal comportant ces donnees. 

Legal Status (Type, Date, Text) 

Publication 20030220 Al With international search report. 

Examination 20030417 Request for preliminary examination prior to end of 

19th month from priority date 
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NETWORK PUBLISHING AUTHORIZATION PROTOCOL 

PROTOCOLE D'AUTORISATION DE PUBLIER POUR RESEAU 
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Main International Patent Class: H04L-009/32 
International Patent Class: G06F-003/12 
Publication Language: English 
Filing Language: English 
Fulltext Availability: 

Detailed Description 

Claims 

Fulltext Word Count: 30383 
English Abstract 

A network publishing authorization protocol, for use in a network 
connected to a printer, a server and a publisher of network publications. 
The protocol authorizes the printing of a publication at. the printer. It 
includes the steps of: addressing the publication to a user; signing the 
publication using a private key; sending the publication to the printer; 
and confirming that the publication may be printed at the printer, by 



verifying the private key signature. Confirmation may take place at the 
printer or at the server. 

French Abstract 

L 1 invention porte sur un protocole d ! autorisation de publier pour reseau 
relie a une imprimante a un serveur et a un editeur de publications du 
reseau. Ledit protocole, qui autorise I'impression d'une publication sur 
une imprimante, comprend les phases suivantes: adressage d'une 
publication a un abonne, signature de la publication a l ! aide d'un code 
prive; transfert de la publication a 1 1 imprimante, et confirmation de 
1 1 autorisation d ! impression par verification de la signature par code 
prive, ladite confirmation pouvant se faire au niveau de 1 1 imprimante ou 
du serveur. 

Legal Status (Type, Date, Text) 

Publication 20001130 Al With international search report. 
Examination 20010222 Request for preliminary . examination prior to end of 

19th month from priority date 
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INTERACTIVE DEVICE NETWORK REGISTRATION PROTOCOL 
PROTOCOLE D 1 ENREGISTREMENT RESEAU DE DISPOSITIF INTERACTIF 
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Main International Patent Class: H04L-009/30 

Publication Language: English 

Filing Language: English 

Fulltext Availability: 
Detailed Description 
Claims 

Fulltext Word Count: 29305 
English Abstract 

In a network connected to an interactive device and a registration 
server, a protocol for registering the interactive device with the 



registration server, including the steps of: installing a secret key and 
a public unique identifier in non-volatile memory in the interactive 
device and in a database of the registration server, before the 
interactive device is connected to the network; then, when the 
interactive device is connected to the network, authenticating the 
interactive device at the server by verifying the interactive device's 
encryption, using the secret key, of a challenge message; and finally, if 
the authentication succeeds, registering the interactive device in the 
database of the registration server. 

French Abstract 

Cette invention a trait a un protocole d ' enregistrement de dispositif 
interactif a un serveur d 1 enregistrement dans un reseau connecte a un 
dispositif interactif et a un serveur d 1 enregistrement . Ce protocole 
comporte les operations suivantes : mise en place d'une clef secrete et 
d'un identif icateur unique public dans la memoire remanente du dispositif 
interactif et dans une base de donnees du serveur d 1 enregistrement avant 
la connexion du dispositif interactif au reseau puis, une fois le 
dispositif interactif connecte au reseau, authentif ication du dispositif 
interactif aupres du serveur par verification dans un message test du 
chiffrage du dispositif interactif, lequel chiffrage utilise la clef 
secrete et enfin, si 1 1 authentif ication aboutit, enregistrement du 
dispositif interactif dans la base de donnees du serveur 
d ' enregistrement . 

Legal Status (Type, Date, Text) 
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Examination 20010222 Request for preliminary examination prior to end of 

19th month from priority date 
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Detailed Description 

Claims 

Fulltext Word Count: 29585 
English Abstract 

In a network connected to a printer and a registration server, a network 
registration protocol for registering the printer on the network includes 
the steps of installing a secret unique identifier and public unique 
identifier in non-volatile memory in the printer and in a database of the 
registration server, before the printer is connected to the network; 
then, when the printer is connected to the network, authenticating the 
printer to the server by comparison of the secret unique identifiers 
installed in printer and server, using a secure transmission between the 
two over the network. Also a network registration signal for transmission 
over a network from a printer to a registration server to register the 
printer with the server, where the signal is transmitted at the first 
occasion the printer is connected to the network. 

French Abstract 

Dans un reseau relie a une imprimante et a un serveur d' enregistrement, 
on utilise pour enregistrer 1' imprimante dans le reseau un protocole 
d 1 enregistrement comportant les phases suivantes : installation d f un 
identif icateur secret unique et d'un identif icateur publique unique dans 
une memoire non volatile de l 1 imprimante et dans la base d' enregistrement 
du serveur avant de raccorder 1 1 imprimante au reseau; apres raccordement 
de 1 1 imprimante, authentif ication imprimante/serveur par comparaison 
entre les identif icateurs secrets uniques de 1 1 imprimante et du serveur; 
et utilisation d'une transmission sure transitant par le reseau entre 
1' imprimante et le serveur. L' invention porte egalement sur le signal 
d f enregistrement de l 1 imprimante dans le serveur d 1 enregistrement , 
transitant par le reseau et allant de 1' imprimante au serveur, et 
transmis lorsque l 1 imprimante est reliee pour la premiere fois au reseau. 

Legal Status (Type, Date, Text) 
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Detailed Description 
Claims 
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English Abstract 

A network terminal authorization protocol, for use in a network connected 
to a printer, a server and a network terminal. The protocol authorizes, 
via the server, the printing of a document at the printer at the request 
of the network terminal. It includes the steps of: creating, at the 
server, an authorization record authorizing the network terminal to print 
at the printer; requesting, at the network terminal and via a printing 
request, printing of the document at the printer; verifying, using the 
authorization record, that the network terminal is authorized to print at 
the printer; and, in the event that the verification succeeds, sending 
the document to the printer for printing. 

French Abstract 

L' invention concerne un protocole d f autorisation pour terminal de reseau, 
qui s' utilise dans un reseau relie a une imprimante, un serveur et un 
terminal de reseau. Le protocole autorise, par 1 1 intermediaire du serveur 
et a la demande du terminal de reseau, l 1 impression d'un document au 
moyen de 1 1 imprimante . Le procede d' utilisation consiste a creer, au 
niveau du serveur, un enregistrement d 1 autorisation autorisant le 
terminal de reseau a imprimer au moyen de 1 1 imprimante; a demander, au 
niveau du terminal de reseau et par le biais d'une demande d ' impression, 
l 1 impression du document au moyen de 1 1 imprimante; a verifier, grace a 
1 1 enregistrement d f autorisation, que le terminal de reseau est autorise a 
imprimer au moyen de 1 ' imprimante; et, apres verification concluante, a 
envoyer le document a 1' imprimante pour impression. 
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Public key cryptography for encrypting print data and status messages 
between peripheral devices and computers , involves use of public and 
private keys to effect the decoding and validating operations 
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Abstract (Basic) : RD 443022 A 

NOVELTY - Host sends public key (PUB1) to printer which 
inturn sends public key (PUB2) back to host. On receiving the key 
(PUB2), host sends print data stream encrypted with key (PUB2) along 
with its digital signature entered using private key (PR1V1) . 
Printer validates the digital signature using key (PUB1) and sends 
encrypted status message along with its digital signature, for decoding 
and validation by host . 

DETAILED DESCRIPTION - Encryption of data between the host and 
printer is effected using a set of public and private keys which 
enable encryption of print data stream or the return status message. In 
another variation, in order to clearsign data exchange between printer 

and host, the actual messages are not encrypted but encrypted digital 
signature is added to the message. If a network device does not have 
adequate storage space for storing received public keys , the 
public key is added to header of print data stream each time data is 
sent to the device. Once the print data is printed and return status 
message is sent, the host's public key is deleted from the printer 
' s memory. 

USE - For encrypting print data and status messages between 
peripheral devices and computers. 

ADVANTAGE - Due to validation of sender, only authorized PC and 
authorized application programs are allowed. Sending device is provided 
with greater control of which public keys are used by printer for 
each data stream. 

DESCRIPTION OF DRAWING (S) - The figure explains public key 
encryption procedure in printer . 
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the printer is authenticated by comparing the secret unique 
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authenticate printer connected to the network. An INDEPENDENT CLAIM 
is also included for network registration signal. 

USE - For registering a printer such as high speed color printer 
on network. 

ADVANTAGE - Periodicals from subscriber or authorized sources is 
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authorized reliably. 
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Abstract (Basic) : WO 200072503 Al 

NOVELTY - Secret key and public unique identifier are installed 
in non-volatile memory in an interactive device and in a registration 
server database (74) before the device is connected to a network. The 
server (11) authenticates the device on installation, by verifying 
the device's encrypted challenge message using the secret key . The 
device is registered in the server f s database, when the 
authentication succeeds . 

DETAILED DESCRIPTION - The authentication step involves 
transmitting a registration request with the unique public identifier 
from the device to the server. In response, the server generates a 
challenge message which is transmitted to the device. The device 
encrypts the challenge using the secret key and the encrypted 
challenge is transmitted to the server where the encrypted challenge is 
decrypted using the secret key . The server authenticates the 
device by comparing the decrypted challenge with the challenge. 

USE - For registering an interactive device like printers , with 
registration server in network. 

ADVANTAGE - Allows large number of distributed users to interact 
with networked information via printed matter and optical sensors, 
thereby obtaining interactive printed matter on demand via high speed 
networked color printer . 

DESCRIPTION OF DRAWING (S) - The figure shows the schematic view of 
interactive device registration protocol. 

Server (11) 

Database (74) 
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and authenticating requests with copyright server directing document 
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Abstract (Basic) : EP 665486 A 

The protection method involves receiving requests for documents 
from several users (117) having computers with displays (121) and 
printers (123). The computers are connected to a network (9), and the 
requests include unique user identification for each of the users. The 
requests are authenticated with a copyright server (7), which is 
used to direct a document server (3) to act upon proper request 
authentication. 

In response to this direction the document server creates encrypted 
documents along with a unique identification for each authenticated 



• 



request and forwards the documents to the user through the network to 
corresp. agents of the authenticated request user. Each of the agents 
is selected from display agents and printer agents. The documents are 
encoded so that each document is uniquely encoded based on the unique 
identification, and are decrypted at the agent and so available for use 
when the secret keys are provided by the user. 

ADVANTAGE - Fully protects electronically published documents, and 
discourages distribution of illegal copies in violation of copyright 
laws, so that copies can be traced back to original owner. 

Dwg.2/3 

Abstract (Equivalent) : US 5509074 A 

A method of protecting electronically published documents, which 
comprises the step of: 

operating a computer system, including a copyright server and a 
document server connected thereto, and a network for electronic 
publication of documents stored in the document server, and including 
therein the steps of: 

a. ) receiving requests for documents from a plurality of users 
having computers with display devices or printers , said computers 
being connected by said network to said computer system, said requests 
including unique user identification for each of said plurality of 
users; 

b. ) authenticating said requests from said plurality of users with 
the copyright server; 

c. ) using said copyright server to direct the document server to 
act upon proper authentication of each request; 

d. ) in response to direction from said copyright server, using the 
document server to create encrypted documents from an encoded document 
along with a unique identification for each authenticated request and 
forwarding said documents to each authenticated request user through 
said network to corresponding agents located at each authenticated 
request user, each of said agents being selected from display agents 
and printer agents; 

e. ) encoding a requested document as an encoded document using the 
document server so that each encoded document created is uniquely 
encoded based upon said unique identification; and, y 

f. ) decrypting said documents at each of said agents and making ' 
said documents available for use only in response to receiving correct 
secret keys provided by said authenticated request user to said 
agents . 
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Abstract (Basic): WO 200406086 A2 

NOVELTY - The method involves establishing an interprocess 
communication having a network address to identify a server (10) . An 
authenticating request is sent to the server from a mobile printer 
(30) . The print data portions to be downloaded are received from the 
server upon successful authentication . The server is notified 
after print completion to terminate connection when the print session 
ends or due to the occurrence of errors . 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are also included for the 
following : 

(a) a printer 

(b) a computer program product for enabling a mobile printer to 
download data items from a server. 

USE - Used for enabling a mobile printer to download data items 
from a server. 

ADVANTAGE - The server receives the characteristics of the mobile 
printer and compares it with the characteristics stored in its database 
during the authentication process. The printer characteristic enables 
the preparing of documents to be printed at a specific mobile printer 
and processing of documents to achieve optimum quality prints. 

DESCRIPTION OF DRAWING (S) - The drawing shows a graphical 
representation of a printer-server system. 

Sever (10) 

Network (20) 

Remote printer (30) 
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Abstract (Basic) : EP 1380935 A2 

NOVELTY - An issue unit issues print job, when user authentication 
is successful. The job designation information is obtained from a 
printer, in response to the issued print job. The obtained information 
is written in a detachable storage medium. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are also included for the 
following : 

(1) printer; 

(2) printing system; 

(3) information processor control method; 

(4) printer control method; 

(5) printing method; 

(6) program for controlling information processor; 

(7) printing program; 

(8) program for controlling printer; 

(9) computer-readable storage medium storing program for 
controlling printer; 

(10) computer-readable storage medium storing program for 
controlling information processor; and 

(11) computer-readable storage medium storing printing program. 
USE - Information processor e.g. personal computer (PC) for use 

with printer (claimed) . 

ADVANTAGE - The permission to use the printer is efficiently and 
easily controlled, by writing job designation information in the 
detachable storage medium and controlling user authentication using 
detachable storage medium. 

DESCRIPTION OF DRAWING (S) - The figure shows a schematic view of 
the printing system. 

user PC (1-1) 

printer (1-2) 

spooling area (1-3) 
authentication server (1-4) 
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Abstract (Basic),: JP 2003283738 A 

NOVELTY - A management center (13) performs an access attempt to a 
data communication unit (12) . A memory unit stores, connection 
authentication information. The access attempt is authorized, when the 
received connection authentication information is same as the stored 
information. The circuit connection to the center is disconnected, when 
the unauthorized access attempt count reaches a predetermined threshold 
value . 

DETAILED DESCRIPTION - An INDEPENDENT CLAIM is also included for 
image forming device remote management system. 

USE - For remote management of image forming device (claimed) such 
as copier. 

ADVANTAGE - Since the received information is compared with stored 
information for authenticating the access, the access to the image 
forming device is performed efficiently. 

DESCRIPTION OF DRAWING (S) - The figure shows the block diagram of 
the data communication unit. (Drawing includes non- English language 
text) . 

reproduction apparatus group (11) 
data communication unit (12) 
management center (13) 
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Abstract (Basic) : US 20030079134 Al 

NOVELTY - The URL of document (102), user credential, delegation 
credential (106) are transmitted from client (100) to print server 
(110) for verification . The server credentials along with 
delegation credential and document URL is transmitted to document 
repository (120) after verification . The server and delegation 
credentials are verified by repository and document corresponding to 
URL is provided to server for printing. 

USE - For client-server document repository system in which a 
document such as Microsoft Word document, Postscript files, Adobe PDF 
files is searched and provided to print server, printer, facsimile 
machine, remote printer, copier, e-mail server by using wireless 
devices such as cell phones, personal digital assistants (PDA), hand 
held personal computer (PC) . 

ADVANTAGE - The desired document can be printed without retrieving 
and storing the document in the client device, thereby improving the 
operation efficiency. 

DESCRIPTION OF DRAWING (S) - The figure shows a block diagram of the 
client-server document repository system. 

client (100) 

URL of document (102) 

delegation credential (106) 

print server ( 110 ) 

document repository (120) 
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Abstract (Basic) : EP 1300808 Al 

NOVELTY - The system for preparing letters for posting includes use 
of a first standard printer, connected to a computer terminal, for 
printing the address, postal co-ordinate data and the required service 
on the outside of an envelope. This computer is connected to the 
Internet, and thus also establishes connection with a remote server , 
enabling the authentication of a franking stamp to be applied to the 
envelope. This is applied by a second secure printer, after the initial 
information has been applied to the envelope. 

DETAILED DESCRIPTION - The system for preparing articles to be 
posted includes use of a postal stamp marking, and further marking 
representing the service associated with the article to be posted, as 
requested by the user. The system includes a first standard printer 
(14) connected to a computer user terminal. This computer user terminal 
is itself connected, via the Internet (10), to a computer server (16) 
hosting the website of a independent organization for the preparation 
of articles for posting. This enables the printing of both postal 
co-ordinates of the destination, and the marking of the service 
required. A second secure printer comprises a franking machine (20) 
which then applied the postal franking mark. 

USE - Preparing letters for posting. 

ADVANTAGE - Provides secure franking of letters for posting. 
DESCRIPTION OF DRAWING (S) - The diagram shows the two printers used 
to apply destination data, and the franking mark. 
Internet (10) 




standard printer (14) 
server (16) 
franking machine (20) 
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Abstract (Basic) : JP 2002171252 A 

NOVELTY - The password server (3) has a table in which combination 
of user ID including user name and password, and information about 
physical authentication IDs such as magnetic card are stored. User 
authenticity is verified using physical authentication ID information, 
for using the network printer (2) . 

USE - Network printer. 

ADVANTAGE - Enables handling confidential document without 
requiring special input device. 

DESCRIPTION OF DRAWING (S) - The figure demonstrates the network 
environment . 

Network printer (2) 

Password server (3) 
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A method for the remote printing of a document by use of a network, the 
method including receiving at a server the document as sent from a 
sender; the server forwarding the document to a recipient; the document 
being authenticated prior to being forwarded to the recipient; and the 
server receiving instructions from the sender regards printing controls 
and the server implementing those controls on the recipient. A hardware 
device to support the printing controls is also disclosed. 
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...CLAIMS 18. A method as claimed in claim 8, characterised in that the 
printer and the server system perform secure handshaking to 
authenticate each other, the printer and the server using one or 
more selected from the group consisting of a public key pair or 
the symmetry key of the printer , the server sending the encrypted 
document hash, an optical watermark, and printing instructions, to 
the printer and the printer receives the document through client 
software, decrypts the document, and verifies the... 
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...SPECIFICATION where encryption is not used, the message digest itself is 
transmitted as the data signature at block 115 and there is no 
public or shared key to transmit. A device identifier, such as a serial 
number of the generating device, may also be transferred. 
At block 116, the receiving point of... 

...for an embodiment of a point of sale device 118 according to the present 
invention. The closing operations taking place at the point of sale 
terminal in the illustrated embodiment of... 



.an electronic journal memory or file which is closed so that no 
alterations may be made which cannot be detected using the 
authentication techniques described herein. In the embodiment illustrated 4 
in FIG. 5, printer private key 132, printer public key 134 
and printer serial number 136 are all stored in portions of 
electronically programmable read only fiscal memory 130. At the end of 
a journal period, the printer private key 132 and message digest 
124 are used by encryption algorithm 138 to generate a data... 

.is stored in the data signature portion 54 of the electronic journal 
file 50. The printer public key 134 and printer serial number 
136, respectively, are transferred and stored in portions 56 and 58 
respectively of the electronic... 
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ABSTRACT EP 892369 A2 

A postage evidencing system including a plurality of domains for 
partitioning a population of postage meters according to an operating 
characteristic, a data center, a postage meter in operative communication 
with the data center and a printer in operative communication with the 
postage meter. The postage meter is initialized to operate in a 
particular domain while the printer is capable of operating in each of 
the plurality of domains. To update or enable a domain in the printer, 
the postage meter transmits an indication of the particular domain to the 
data center. Then, the data center encrypts the indication and transmits 
the indication to the postage meter which in turn forwards the encrypted 
indication to the printer. The printer decrypts the encrypted indication 
and using the indication enables a respective domain in the printer 
corresponding to the particular domain of the postage meter. A method for 
updating domains in a postage evidencing system is also provided. 
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...SPECIFICATION skilled in the art that keys have been synchronized 

between the meter 120 and the printer 130 without transmitting the keys^ 
themselves. Furthermore, the keys used are unique to that meter 120 and 
printer 130 combination only. That is, since the serial number 



• ft 
0 is unique to each printer 1^5 



Nph) ) of the printer ^^PBO is unique to each printer 1^5 in the 

preferred embodiment so as to provide the greatest degree of security, no 

two keys Kph))x are the same. In summary, the meter 130 has the 
capability to make a key Kph))x which is specific to the particular 
printer 130 with which it is in communication. Therefore, the 
interchangeability of the meters 120 with... 
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The apparatus comprises: a first module including a universal key; a 
second module including a unique identifier and a unique key wherein the 
unique key is derived from the unique identifier and the universal key 
and incorporated into the second module during manufacture of the second 
module. The second module is in communication with the first module. The 
apparatus further comprises a controller for performing the following 
subsequent to manufacture of the first module and the second module: 
initiating a communication session between the first module and the 
second module; transmitting the unique identifier from the second module 
to the first module; and deriving the unique key in the first module 
using the unique identifier and the universal key. A method for 
synchronization of cryptographic keys between modules of a distributed 
system and a method of manufacturing a postage evidencing system are also 
provided . 
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...SPECIFICATION skilled in the art that keys have been synchronized 

between the meter 120 and the printer 130 without transmitting the keys 
themselves. Furthermore, the keys used are unique to that meter 120 and 
printer 130 combination only. That is, since the serial number Nph) ) 
of the printer 130 is unique to each printer 130 in the preferred 
embodiment so as to provide the greatest degree of security, no two 
keys Kph))x are the same. In summary, the meter 130 has the capability 
to make a key Kph))x which is specific to the particular printer 130 
with which it is in communication. Therefore, the interchangeability of 
the meters 120 with. . . 
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Detailed Description 

Claims 

Fulltext Word Count: 18683 
English Abstract 

A method for the remote printing of a document by use of a network, the 
method including the steps of: (a) receiving at a server the document as 
sent from a sender; (b) the server forwarding the document to a 



recipient; (c) the doclBint being authenticated prior tSPBeing fowarded 
to the recipient; and (d) the server recieving instructions from the 
sender regards printing controls and the server implementing those 
controls on the recipient. A hardware device to support the printing 
controls is also disclosed. 



French Abstract 

Cette invention se rapporte a un procede qui sert a imprimer a distance 
un document a l'aide d ! un reseau et qui consiste a cet effet: (a) a 
recevoir au niveau d'un serveur le document envoye par un expediteur; (b) 
pour le serveur, a acheminer le document a un destinataire ; (c) le 
document etant authentifie avant d'etre achemine au destinataire; et (d) 
pour le serveur, a recevoir des instructions en provenance de 
I 1 expediteur au sujet des commandes d' impression et a executer ces 
commandes a 1' intention du destinataire. Un dispositif materiel prenant 
en charge les commandes d* impression est egalement decrit. 

Legal Status (Type, Date, Text) 

Publication 20020418 Al With international search report. 

Examination 20020516 Request for preliminary examination prior to end of 

19th month from priority date 
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Detailed Description 
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Detailed Description 

processing unit, and a secure clock. The secure memory may be used to 
store a private key ; the central processing unit may be used to 
prevent run-time attacks; and the secure clock can be used to keep time. 

Preferably, the printer and the server use a public key pair or 
symmetry key of the printer to perform secure handshaking to 
authenticate each other. 



The server may send an encrypted document hash and optical waterinark, 
and printing instructions, to the printer. . .program, and to the run-time 
program . 

When a user requests authority to print an authenticated copy, the 
server system communicates with the printer to complete the 
handshaking process via the client. 

After successful authentication of the printer and the server 
system based on public key pairs, the server system sends the 
encrypted hash and optical watermark with time stamp, as well as printing 
instructions, to the printer . For the details on security handshaking 
protocols and encrypted data transmission, refer to Chapter 9... 

...public world", by C. Kaufman, R. Perlman, and M. Speciner, PTR Prentice 
Hall, 1995. 

The printer stores its private key in a secure memory. Its digital 
certificate is made known to the server system when the recipient is 
registered with the service center. 

After successfully completing the security. . . 

Claim 

... keep time. 29) A method as claimed in claim 27, wherein the printer 
and the server system perform secure handshaking to authenticate each 
other, the printer and the server using one or more selected from the 
group consisting of a public key pair or the symmetry key of the 
printer . 30) A method as claimed in claim 27, wherein the server sends 
the encrypted document. . . 
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English Abstract 

The transmission and reproduction of an original document transferred via 
a data network can be guaranteed when the printing mechanism (116) 
generates a unique serial number for the document being printed. The 
sender of the document is assured that the intended recipient received 
the document and was able to print it by receipt of the unique serial 
number and a request for an encryption key by which certain information 
in the document was encrypted. 

French Abstract 

La transmission et la reproduction d'un document original via un reseau 
de donnees peut etre garantie lorsque le mecanisme d 1 impression (116) 
genere un numero de serie unique pour le document imprime. L'expediteur 
du document a 1' assurance que le destinataire prevu a bien recu le 
document et qu ! il a pu 1 1 imprimer grace a la reception d ? un numero de 
serie unique et d'une demande de cle de chiffrage au moyen de laquelle 
certaines informations cles du document avaient ete cryptees. 
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Detailed Description 



second computers, fl^^ recipient 1 s (i.e. second) comfSRr 10 8 will 
request from the printer 1 1 6 an encryption key for public 
distribution (i.e. a public encryption key ) in the forniat of an 
X.509 certificate, which might be embodied as a serial number , a 
model number or 

combination thereof obtained from the printer in step 204 in Figure 2 
In Figure 2-2, when the printer returns an X.509 certificate and data 
as that I 0 identifies the capabilities of the printer at step 206, the 
user's computer installs the public key on a browser plug-in file, 
known to those skilled in the art. 

Information about... 
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English Abstract 

The present invention provides a method of enabling a first user to 
obtain, using a business card of a second user, authority to transmit 
electronic mail to the second user, the business card including coded 
data indicative of the identity of the business card and of at least one 
reference point of the business card, the method including the steps of: 
receiving, in a computer system, indicating data from a sensing device 
regarding the identity of the business card and a position of the sensing 
device relative to the business card, the sensing device, when placed in 
an operative position relative to the business card, sensing the 
indicating data using at least some of the coded data; identifying, in 
the computer system and from the indicating data a request to authorise 



the transmission of eJ^P:ronic mail from the first to second user; 

and recording, in the computer system, an authority allowing the first 
user to transmit electronic mail to the second user. 



French Abstract 

La presente invention se rapporte a un procede visant a permettre a un 
premier utilisateur d'obtenir, au moyen d f une carte prof essionnelle d'un 
second utilisateur, 1 ' autorisation de transmettre du courrier 
electronique au second utilisateur, ladite carte prof essionnelle 
comportant des donnees codees representatives de l'identite de la carte 
prof essionnelle et d f au moins un point de reference de la carte 
prof essionnelle . Ledit procede consiste a recevoir, dans un systeme 
inf ormatique, des donnees representatives en provenance d'un dispositif 
capteur qui concernent l'identite de la carte prof essionnelle et une 
position dudit dispositif capteur par rapport a la carte prof essionnelle , 
ledit dispositif capteur etant concu pour capter, lorsqu'il est place 
dans une position operationnelle par rapport a la carte prof essionnelle, 
les donnees representatives au moyen d'au moins certaines des donnees 
codees; a identifier, dans le systeme inf ormatique et a partir des 
donnees representatives, une demande d ' autorisation de transmission du 
courrier electronique du premier vers le second utilisateur; et a 
enregistrer, dans le systeme inf ormatique, une autorisation permettant au 
premier utilisateur d'emettre le courrier electronique a destination de 
second utilisateur. 
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Detailed Description 

cryptography is only used to create digital signatures and to securely 
exchange secret session keys. Secret - key cryptography is used for all 
other purposes. 

In the following discussion, when reference is made to the secure 
transmission of information between a netpage printer and a server, 
what actually happens is that the printer obtains the server ' s 
certificate , authenticates it with reference to the certificate 
authority, uses the public key -exchange key in the certificate to 
exchange a secret session key with the server, and then uses the 
secret session key to encrypt the message data... 

...unique identifiers at time of manufacture which are stored in read-only 
memory in the printer and in the netpage registration server database. 
The first ID 62 is public and uniquely... 

...connects to the netpage network for the first time after installation, 
it creates a signature public / private key pair. It transmits the 
secret ID and the public key securely to the netpage registration 
server. The server compares the secret ID against the printer 's 
secret ID recorded in its database, and accepts the registration if 
the IDs match. It then creates and signs a certificate containing the 
printer 's public ID and public signature key , and stores the 
certificate in the registration database. 

The netpage registration server acts as a certificate authority for 
netpage printers , since it has access to secret information allowing it 
to verify printer identity. 



-42 When. . . 



...to the user's default printer or a specified printer. 



Every document sent to a printer via a page server is addressed to a 



particular user and i^^igned by the publisher using tf^Ppublisher 1 s 
private signature key . The page server verifies , via the 

registration database, that the publisher is authorized to deliver the 
publication to the specified user. The page server verifies the 
signature using the publisher's public key, obtained from the publisher's 
certificate stored. . . 
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English Abstract 

A camera for capturing an image and printing a first interface onto a 
first surface, in response to a user input, and for printing a second 
interface onto a second surface, in response to first indicating data 
received from a sensing device in the form of a stylus. The first 
indicating data is sensed by the stylus from first coded data. The first 
interface includes the first coded data. The camera includes a camera 
module, an input module and a printing module. The camera module includes 
an image sensor. The camera module is configured to receive a user input, 
and, in response to the user input, capture the image via the image 
sensor. The input module is configured to receive the first indicating 
data from the stylus, the first indicating data being at least partially 
indicative of response data. The input module generates second indicating 
data based on the first indicating data, the second indicating data being 



at least partially int^^ative of the response data. The^Recond indicating 
data is sent to a computer system. The printing module includes a 
printing mechanism. The printing module is configured to receive the 
image from the camera module and print the first interface onto the first 
surface using the printing mechanism. The first interface is based at 
least partly on the image. The printing module is also configured to 
receive the response data from the computer system and print the second 
interface onto the second surface using the printing mechanism. The 
second interface is based at least partially on the response data. 

French Abstract 

L 1 invention concerne un appareil photo permettant de capturer une image 
et d 'imprinter, d'une part, une premiere interface sur une premiere 
surface suite a une entree de 1 ' utilisateur et, d 1 autre part, une seconde 
interface sur une seconde surface suite aux premieres donnees 
d f indication transmises par un capteur presentant la forme d'un stylet. 
Les premieres donnees d' indication sont captees par le stylet a partir 
des premieres donnees codees . La premiere interface comprend les 
premieres donnees codees. L' appareil photo comprend un module appareil 
photo et un module imprimante. Le module appareil photo comprend un 
capteur d' image. II est concu pour recevoir une entree de 1 ' utilisateur , 
et, suite a cette entree, pour capturer 1 1 image par 1 1 intermediaire du 
capteur d' image. Le module d' entree est concu pour recevoir les premieres 
donnees d' indication transmises par le stylet, ces donnees representant , 
au moins en partie, les donnees de reponse. Le module d 1 entree produit 
des secondes donnees d 1 indication basees sur les premieres donnees 
d ' indication . Ces secondes donnees representent , au moins en partie, les 
donnees de reponse. Les secondes donnees d 1 indication sont transmises a 
un systeme inf ormatique . Le module imprimante comprend un mecanisme 
d 1 impression. II est concu pour recevoir 1 1 image transmise par le module 
appareil photo et pour imprimer la premiere interface sur une premiere 
surface par 1 ' intermediaire du mecanisme d 1 impression . Le module 
imprimante est egalement concu pour recevoir les donnees de reponse 
transmises par le systeme informatique et pour imprimer la seconde 
interface sur la seconde surface par 1 ' intermediaire du mecanisme 
d 1 impression . La seconde interface se fonde, au moins en partie, sur les 
donnees de reponse. 
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Detailed Description 

. . . following discussion, when reference is made to the secure 

transmission of information between a netpage printer and a server, 
what actually happens is that the printer obtains the server 's 
certificate , authenticates it with reference to the certificate 
authority, uses the public key -exchange key in the certificate to 
exchange a secret session key with the server, and then uses the 
secret session key to encrypt the message data in readonly memory in the 
printer and in the netpage registration server database. The first ID 62 
is public and uniquely. . . 

...connects to the netpage network for the first time after installation, 
it creates a signature public / private key pair. It transmits the 
secret ID and the public key securely to the netpage registration 
server. The server compares the secret ID against the printer 's 
secret ID recorded in its database, and accepts the registration if 
the IDs match. It then creates and signs a certificate containing the 
printer f s public ID and public signature key , and stores the 
certificate in the registration database. 



The netpage registration server acts as a certificate authority for 



netpage printers , sl^Pe it has access to secret information allowing it 
to verify printer identity. 

When a. . . 

.to the user's default printer or a specified printer. Every document 
sent to a printer via a page server is addressed to a particular user 
and is signed by the publisher using the publisher's private signature 
key . The page server verifies , via the registration database, that 
the publisher is authorized to deliver the 0 publication to the specified 
user. The page server verifies the signature using the publisher's 
public key, obtained from the publisher's certificate stored... 
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Claims 
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English Abstract 

A network publishing authorization protocol, for use in a network 
connected to a printer, a server and a publisher of network publications. 
The protocol authorizes the printing of a publication at the printer. It 
includes the steps of: addressing the publication to a user; signing the 
publication using a private key; sending the publication to the printer; 
and confirming that the publication may be printed at the printer, by 
verifying the private key signature. Confirmation may take place at the 
printer or at the server. 

French Abstract 

L' invention porte sur un protocole d 1 autorisation de publier pour reseau 

relie a une imprimante a un serveur et a un editeur de publications du 

reseau. Ledit protocole, qui autorise l 1 impression d'une publication sur 

une imprimante, comprend les phases suivantes : adressage d f une 

publication a un abonne, signature de la publication a l'aide d ! un code 



prive; transfert de 1 ^Publication a 1 ' imprimante, et confirmation de 

1 1 autorisation d 1 impression par verification de la signature par code 
prive, ladite confirmation pouvant se faire au niveau de 1 ' imprimante ou 
du serveur. 
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... also involve verifying the publisher's signature at the second server 
using the publisher's public key , obtained from the first server . 
It may also involve verifying at the second server that the printer 
is registered for the user, by accessing the first server. If the 
confirmation succeeds, the ... following discussion, when reference is made 
to the secure transmission of information between a netpage printer and 
a server, what actually happens is that the printer obtains the server 
1 s certificate , authenticates it with reference to the certificate 
authority, uses the public key -exchange key in the certificate to 
exchange a secret session key with the server, and then uses the 
secret session key to encrypt the message data... the registration if the 
IDs match. It then creates and signs a certificate containing the 
printer J s public ID and public signature key, and stores the certificate 
in the registration database... 

...verifies that the printer is a registered netpage printer by verifying 
the signature using the printer ! s public signature key from the 
printer 1 s certificate, available from the registration server. The 
netpage registration server can act as a certificate authority for the 
printer since it has priveleged access to secret information allowing it 
to verify printer identity. 

As an alternative to the printer generating the signature public / 
private key pair when it registers, the private key 92 can be 
stored in the printer 's ROM at time of manufacture and the matching 
public key 91 stored in the registration server database at time of 
manufacture, obviating the need for the secret H) 90. 

As another alternative, printer registration can utilize the same 
technique used for pen registration, as described below. 



3 1... 



.1 1, that the terminal is authorized to print on the specified printer. 
The registration server verifies , via the Web terminal record 809 in 
the registration server database, that the terminal is authorized to 
print to the printer , and verifies the digital signature using the 
terminal's public key 95. 

The user can print a list of current printing authorizations at any time, 
and. . . 
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English Abstract 

In a network connected to an interactive device and a registration 
server, a protocol for registering the interactive device with the 
registration server, including the steps of: installing a secret key and 
a public unique identifier in non-volatile memory in the interactive 
device and in a database of the registration server, before the 
interactive device is connected to the network; then, when the 
interactive device is connected to the network, authenticating the 
interactive device at the server by verifying the interactive device's 
encryption, using the secret key, of a challenge message; and finally, if 
the authentication succeeds, registering the interactive device in the 
database of the registration server. 

French Abstract 

Cette invention a trait a un protocole d ' enregistrement de dispositif 
interact if a un serveur d ' enregistrement dans un reseau connecte a un 
dispositif interactif et a un serveur d f enregistrement . Ce protocole 
comporte les operations suivantes : mise en place d'une clef secrete et 
d ? un identif icateur unique public dans la memoire remanente du dispositif 
interactif et dans une base de donnees du serveur d ' enregistrement avant 
la connexion du dispositif interactif au reseau puis, une fois le 
dispositif interactif connecte au reseau, authentif ication du dispositif 
interactif aupres du serveur par verification dans un message test du 
chiffrage du dispositif interactif, lequel chiffrage utilise la clef 
secrete et enfin, si 1 ' authentif ication aboutit, enregistrement du 
dispositif interactif dans la base de donnees du serveur 
d 1 enregistrement . 
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following discussion, when reference is made to the secure 
transmission of information between a netpage printer and a server, 
what actually happens is that the printer obtains the server f s 



certificate , authen^Bates it with reference to the ^rertif icate 
authority, uses the public key -exchange key in the certificate to 
exchange a secret session key with the server, and then uses the 
secret session key to encrypt the message data... 

...registration if the H)s match. It then creates and signs a certificate 
containing the printer ' s public ID and public signature key, and stores 
the certificate in the registration database... 

. . .verifies that the printer is a registered netpage printer by verifying 
the signature using the printer 's public signature key from the 
printer ! s certificate, available from the registration server. The 
netpage registration server can act as a certificate authority for the 
printer since it has priveleged access to secret information allowing it 
to verify printer identity. 

As an alternative to the printer generating the signature public / 
private key pair when it registers, the private key 92 can be 
stored in the printer ' s ROM at time of manufacture and the matching 
public key 91 stored in the registration server database at time of 
manufacture, obviating the need for the secret H) 90. 

As another alternative, printer registration can utilize the same 
technique used for pen registration, as described below. 

3 1...1 1, that the terminal is authorized to print on the specified 
printer. The registration server verifies , via the Web terminal 
record 809 in the registration server database, that the terminal is 
authorized to print to the printer , and verifies the digital signature 
using the tenninal's public key 95. 

The user can print a list of current printing authorizations at any time, 
and. . . 
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English Abstract 

In a network connected to a printer and a registration server, a 
network registration protocol for registering the printer on the 
network includes the steps of installing a secret unique identifier 
and public unique identifier in non-volatile memory in the printer and 
in a database of the registration server, before the printer is 
connected to the network; then, when the printer is connected to the 
network, authenticating the printer to the server by comparison of 
the secret unique identifiers installed in printer and server, 
using a secure transmission between the two over the network. Also a 
network registration signal for transmission over a network from a 
printer to a registration server to register the printer with the server, 
where the signal is transmitted at the first occasion the printer is 
connected to the network. 

French Abstract 

Dans un reseau relie a une imprimante et a un serveur d 1 enregistrement , 
on utilise pour enregistrer I 1 imprimante dans le reseau un protocole 
d' enregistrement comportant les phases suivantes : installation d f un 
identif icateur secret unique et d'un identif icateur publique unique dans 
une memoire non volatile de l 1 imprimante et dans la base d 1 enregistrement 
du serveur avant de raccorder l 1 imprimante au reseau; apres raccordement 
de 1 1 imprimante, authentif ication imprimante/serveur par comparaison 
entre les identif icateurs secrets uniques de l f imprimante et du serveur; 
et utilisation d'une transmission sure transitant par le reseau entre 
1 ' imprimante et le serveur. L T invention porte egalement sur le signal 
d ' enregistrement de 1' imprimante dans le serveur d 1 enregistrement , 
transitant par le reseau et allant de 1 ! imprimante au serveur, et 
transmis lorsque 1* imprimante est reliee pour la premiere fois au reseau. 
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English Abstract 

A method of distributing documents, via a communications network, to a 
plurality of receiving stations associated with a plurality of users. At 
least one document layout is pointcast to each receiving station, the 
document layout being associated with a predetermined user and defining 
one or more data objects such as text, images and graphics. Collections 
of shared data objects are then multicast, via the communications 
network, to the receiving stations on the basis of the respective users' 
document layouts. Each collection is only transmitted to those receiving 
stations whose users' document layouts include data objects in that 
collection. 



French Abstract 

L 1 invention concerne un procede de distribution de documents, par un 
reseau de communication, a plusieurs stations receptrices associees a 
plusieurs utilisateurs . Au moins une presentation de document est envoye 
par diffusion a destination unique a chaque station receptrice, la 
presentation du document etant associee a un utilisateur predetermine et 
definissant un ou plusieurs objets de donnees, tels que le texte, les 
images et les motifs graphiques . Des collections d' objets de donnees 
partages sont ensuite envoyes par multidif fusion, par le reseau de 
communications, aux stations receptrices, en fonction des presentations 
des documents des utilisateurs respectifs. Chaque collection n'est 
transmise qu ' aux stations receptrices dont les presentations de document 
d 1 utilisateur comprennent les objets de donnees de ladite collection. 
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Detailed Description 

following discussion, when reference is made to the secure 
transmission of information between a netpage printer and a server, 
what actually happens is that the printer obtains the server ' s 
certificate , authenticates it with reference to the certificate 
authority, uses the public key -exchange key in the certificate to 
exchange a secret session key with the server, and then uses the 
secret session key to encrypt the message data. . . 

...of unique identifiers at time of manufacture which are stored in 

readonly memory in the printer and in the netpage registration server 
database. The first ID 62 is public and uniquely... 

...connects to the netpage network for the first time after installation, 
it creates a signature public / private key pair. It transmits the 
secret ID and the public key securely to the netpage registration 
server. The server compares the secret ID against the printer 's 
secret ID recorded in its database, and accepts the registration if 
the IDS match. It then creates and signs a certificate containing the 
printer ! s public ID and public signature key , and stores the 



certificate in the reiteration database. 

The netpage registration server acts as a certificate authority for 
netpage printers , since it has access to secret information allowing it 
to verify printer identity. 



-26 When. . . 



...to the user's default printer or a specified printer. Every document 
sent to a printer via a page server is addressed to a particular user 
and is signed by the publisher using the publisher's private signature 
key . The page server verifies , via the registration database, that 
the publisher is authorized to deliver the publication to the specified 
user. The page server verifies the signature using the publisher's 
public key, obtained from the publisher's certificate stored... 
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English Abstract 

A network terminal authorization protocol, for use in a network connected 
to a printer, a server and a network terminal. The protocol authorizes, 
via the server, the printing of a document at the printer at the request 
of the network terminal. It includes the steps of: creating, at the 
server, an authorization record authorizing the network terminal to print 
at the printer; requesting, at the network terminal and via a printing 
request, printing of the document at the printer; verifying, using the 
authorization record, that the network terminal is authorized to print at 
the printer; and, in the event that the verification succeeds, sending 
the document to the printer for printing. 

French Abstract 

L* invention concerne un protocole d 1 autorisation pour terminal de reseau, 



qui s' utilise dans un^seau relie a une imprimante, uWerveur et un 

terminal de reseau. Le protocole autorise, par 1 ' intermediaire du serveur 
et a la demande du terminal de reseau, 1' impression d'un document au 
moyen de 1 ' imprimante . Le procede d 1 utilisation consiste a creer, au 
niveau du serveur, un enregistrement d 1 autorisation autorisant le 
terminal de reseau a imprimer au moyen de 1 1 imprimante ; a demander, au 
niveau du terminal de reseau et par le biais d ! une demande d ' impression, 
1' impression du document au moyen de 1 1 imprimante; a verifier, grace a 
1 1 enregistrement d 1 autorisation, que le terminal de reseau est autorise a 
imprimer au moyen de 1 1 imprimante; et, apres verification concluante, a 
envoyer le document a 1 ' imprimante pour impression. 
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Claims 

Detailed Description 

following discussion, when reference is made to the secure 
transmission of information between a netpage printer and a server, 
what actually happens is that the printer obtains the server ? s 
certificate , authenticates it with reference to the certificate 
authority, uses the public key -exchange key in the certificate to 
exchange a secret session key with the server, and then uses the 
secret session key to encrypt the message data... 

. . .if the H) s 
pts, 

match. It then creates and sips a certificate containing the printer 1 s 
public H) and public signature key, and stores the certificate in the 
registration database... 

...the printer is a registered netpage printer by verifying the signature 
using the printer's public signature key from the printer's 
certificate, available from the registration server. The netpage 
registration server can act as a certificate authority for the printer 
since it has priveleged - 28 access to secret information allowing it to 
verify printer identity. 

As an alternative to the printer generating the signature public / 
private key pair when it registers, the private key 92 can be 
stored in the printer 's ROM at time of manufacture and the matching 
public key 91 stored in the registration server database at time of 
manufacture, obviating the need for the secret ID 90. 

As another alternative, printer registration can utilize the same 
technique used for pen registration, as described below. 

3 1...I 1, that the terminal is authorized to print on the specified 
printer. The registration server verifies , via the Web terminal 
record 809 in the registration server database, that the terminal is 
authorized to print to the printer , and verifies the digital signature 
using the terminal's public key 95. 

The user can print a list of current printing authorizations at any time, 
and. . . 

Claim 

. . . the second server, the verifying step including the sub-steps of 

requesting, at the second server and via a verification request sent 
to the first server , verification ; and verifying , at the first 
server and in response to the verification request, that the network 
terminal is 



authorized to print aHPhe printer 



4 A protocol according to claim 2 or claim 3, including the further steps 
of allocating, at the network terminal, a public/ private signature key 
pair, 

storing, at the network terminal, the private signature key; and 
storing, at the first... 
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English Abstract 

A point of sale device having a verifiable electronic journal system 
which maintains an electronic journal file in lieu of using a journal 
print station. Transaction information is first stored in a non-volatile 
random access memory. A data signature is determined based on the 
contents of the random access memory for a journal. Both the transaction 
information and the data signature are transferred to the separate 
journal memory. The journal memory may, for example, reside on the point 
of sale terminal and tampering with the journal transaction information 
may be detected by reference to the data signature which is also 
transferred and maintained in the electronic journal file. Preferably, 
the data signature is encrypted such as by a shared key encryption scheme 
and the associated public key is also transferred and stored in the 
electronic journal file from the device, such as a fiscal base, which is 
tracking the transaction information as it is created. A hashing 
technique is preferably used so that a comparatively small NVRAM may be 
utilized to support generation of a transaction information set for an 
electronic journal file for a journal period. Accordingly, the data 
signature is an encrypted version of a message digest which is a running 
value reflecting the total of transaction information passed to the 
electronic journal file during a journal period. 

French Abstract 

Cette invention a trait a un dispositif point de vente possedant un 
systeme de journal electronique verifiable, lequel systeme tient a jour 
un fichier de journal electronique au lieu d'utiliser une station 



d ' impression de journl^^ Les information relatives a un^^cransaction sont 
prealablement stockees dans une memoire remanente a acces aleatoire. Une 
signature de donnees est determinee d f apres le contenu de la memoire a 
acces aleatoire concernant un journal. Les informations relatives a la 
transaction et la signature des donnees sont transferees vers une memoire 
distincte de journal. Cette derniere peut, par exemple, se trouver dans 
le terminal du point de vente. Une manipulation des informations 
relatives a la transaction peut etre detectee par reference a la 
signature des donnees, laquelle, est egalement transferee et conservee 
dans le fichier de journal electronique . La signature des donnees est, de 
preference, chiffree, par exemple au moyen d'un mecanisme de chiffrement 
par clef partagee, la clef publique associee etant egalement transferee 
et conservee dans le fichier de journal electronique depuis le dispositif 
point de vente, une base fiscale, par exemple assurant la poursuite des 
informations relatives a la transaction au fur et a mesure de leur 
creation. On utilise, de preference, une technique de hachage, de sorte 
qu f il est possible de faire appel a une memoire remanente a acces 
aleatoire, comparativement de taille reduite, pour prendre en charge la 
production du jeu d 1 informations de transaction concernant un fichier de 
journal electronique pour une periode donnee de celui-ci. En consequence, 
la signature de donnees est une version chiffree d'une compilation de 
messages possedant une valeur d 1 execution correspondant au total des 
informations relatives a la transaction introduites dans le fichier de 
journal electronique durant une periode donnee de celui-ci. 

Fulltext Availability: 
Detailed Description 

Detailed Description 
. . . be detected 

using the authentication techniques described herein. In the embodiment 
illustrated in FIG. 5, printer private key 132, printer public 
key 134 and 

printer serial number 136 are all stored in portions, of 
electronically 

programmable read only fiscal memory 130. At the end of a journal period, 
the printer private key 132 and message digest 124 are used by 
encryption 

algorithm 138 to generate a data. . . 

... is stored in the data 

signature portion 54 of the electronic journal file 50. The printer 

public key 134 and printer serial number 136, respectively, are 
transferred and stored in portions 56 and 58 respectively of the 
electronic . . . 
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English Abstract 

The present invention is directed to a system for providing secured 
access to a software rental or a postage metering system. The virtual 
postage meter software of this invention enables a user to print postage 
indicia on documents, envelopes or labels. To generate valid postage 
indicia the virtual meter software is executed on a first computer while 
it is in communication with the remotely located second computer. All 
communication between the first computer and the second computer utilize 
data encryption algorithms to preserve the security and integrity of the 
data transferred. In one embodiment, the second computer is a collection 
of one or more computers with virtual postage meter enabling software 
capable of communicating simultaneously to a number of user computers 
that are concurrently executing the virtual postage meter software. The 
second computer is connected to one or more US FIPS 140-1 security level 
3 or better certified crytographic devices identified as Postal Security 
Devices (PSD) . The printed postage indicia appears as a two-dimensional 
barcode that includes digital signature, amount of postage, ZIP code and 
other relevant information. 

French Abstract 

La presente invention concerne un systeme donnant acces en mode securise 
a un systeme de location de logiciel ou a une machine a affranchir. Le 
logiciel de machine a affranchir virtuelle de 1' invention permet a 
1 1 utilisateur d ! imprimer des marques d 1 af f ranchissement sur des 
documents, des enveloppes ou des etiquettes. Pour la generation de 
marques d 1 aff ranchissement valables, le logiciel de machine a affranchir 
s 1 execute sur un premier ordinateur en communication avec un second 
ordinateur hors site. Toutes les communications entre le premier 
ordinateur et le second ordinateur mettent en oeuvre des algorithmes de 
cryptage des donnees visant a preserver la securite et l f integrite des 
donnees transferees. Selon une realisation, le second ordinateur est un 
ensemble de plusieurs ordinateurs comportant un logiciel de validation de 
machine a affranchir virtuelle capable de communiquer simultanement avec 
plusieurs ordinateurs utilisateurs executant simultanement le logiciel de 
machine a affranchir virtuelle. Le second ordinateur est connecte a au 
moins un dispositif cryptographique approuve "niveau de securite 3" selon 
US FIPS 140-1, et identifiable comme PSD i( (Postal Security Device)). Les 
marques d ' aff ranchissement imprimees se presentent sous forme d'un code 
barres bidimensionnel incluant une signature numerique, le montant de 
1 ' aff ranchissement , le code postal, et toutes autres informations 
pertinentes . 

Fulltext Availability: 
Detailed Description 

Detailed Description 

then sends image information for printing of postal indicium for the 
granted amount to a printer so that a postal indicium is printed on an 
envelope or label. The printed indicium appears as a two-dimensional 
barcode that includes a unique serial number , mail delivery point 
information, and the amount of postage. 

When a client system sends a postage print request to the PSD server , 
the request must be authenticated before the client system is allowed 
to print the postage, and while the postage is... 
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English Abstract 

This application discloses a method for restricted electronic 
transmission of information including the steps of encrypting information 

(#26) using a public key portion (#22) of a private/public key, 
transmitting the information following encrypting thereof over a medium 
which may be non-secure, receiving the information, following 
transmission thereof, at an output device (#14) in encrypted form, 
decrypting the information, received in encrypted form, at the output 
device using a private key portion (#20) of the private/public key; and 
following decryption in the output device, outputting the information 

(#28) in non-encrypted form. A system for restricted electronic 
transmission of information is also disclosed. 



French Abstract 

L 1 invention concerne un procede de transmission electronique non 
transparente d 1 informations , comprenant les etapes consistant a chiffrer 
des informations (#26) au moyen d'une portion de cle publique (#22) d ! une 
cle privee/publique, a transmettre ces informations apres leur 
chiffrement, sur un support qui peut n'etre pas sur, a recevoir les 
informations, apres leur transmission, au niveau d'un dispositif de 
sortie (#14), sous forme chiffree, a dechiffrer les informations recues 
sous forme chiffree, au niveau du dispositif de sortie, au moyen de la 
portion de cle privee (#20) de la cle privee/publique, puis apres 
dechif f rement dans le dispositif de sortie, a produire ces informations 
(#28) sous une forme non chiffree. L' invention concerne egalement un 
systeme de transmission electronique non transparente d 1 informations . 
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Detailed Description 

the standard billing information, such as a credit card number and a 
signature and the public key or information, such as the serial 
number of the printer , enabling the publisher to readily obtain the 
public key . 

The publisher, using a computer 24, encrypts the clear file 12, using the 
public key and a conventional encryption engine which is commercially 
available from RSA Inc., thus providing an... 



